Windows FileTime timestamp to human readable

[luckyb56]

I tried a lot to convert windows filetime timestamp [web]support.microsoft.com/kb/188768) to human readable using TIME_FORMAT, but was not able to. One sample timestamp is 130308696850032106. This is supposed to be Saturday, December 7, 2013 1:01:25am.
I get this when choosing input format as 'filetime' at [web]silisoftware.com/tools/date.php

Can anyone give me any hint/pointers as to what TIME_FORMAT be set to? I tried with %s%9N but it renders as something else. I have tried convert mstime and ctime, but doesn't help.

[luckyb56]

Got the answer @answers http://answers.splunk.com/answers/63559/multiple-events-and-multiple-key-value-pairs-one-being-times...
To be exact the eval for win32 time should be eval human_time=strftime(time/10000000-11644473600,"%Y-%m-%d %H:%M:%S")

[luckyb56]

Is there anyway I could do this in props.conf while indexing and overwrite the _time value with the above calculated one?